- name: update grub
  command: update-grub

- name: reload fail2ban
  command: fail2ban-client reload

- name: enable ufw
  ufw:
    state: enabled
    policy: deny

- name: restart ufw
  systemd:
    name: ufw
    state: restarted
    enabled: true
  when: ansible_facts['service_mgr'] == 'systemd'

- name: restart ssh
  systemd:
    name: ssh
    state: restarted
    enabled: true
  when: ansible_facts['service_mgr'] == 'systemd'

- name: restart unattended-upgrades
  systemd:
    name: unattended-upgrades
    state: restarted
    enabled: true
  when: ansible_facts['service_mgr'] == 'systemd'

- name: restart fail2ban
  systemd:
    name: fail2ban
    state: restarted
    enabled: true
  when: ansible_facts['service_mgr'] == 'systemd'